JACKGALU S.r.l. (hereinafter also the “Owner”), as holder of the processing of personal data of users (hereinafter, the “Users”) who use the services available on the website www.mxgp-store.com (hereinafter, the “Site” and the “Services”) provide here below the privacy policy pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter referred to as the “Regulation” or the “Applicable Regulations”).
This Site and the Services are reserved for people over eighteen years old. The Owner therefore does not collect personal data relating to people under 18 years old. Upon request of the Users, the Owner will promptly delete all personal data involuntarily collected and related to people under 18 years old.
The Owner takes into the utmost account the right to privacy and the protection of its Users’ personal data. For any information in connection with this privacy policy, Users can contact the Owner at any time, using the following methods:
1. Purpose of treatment
Users’ personal data will be treated lawfully by the Owner for the following treatment purposes:
(a) contractual obligations and the provision of the Services to allow the navigation of the Site, i.e. to comply with the Terms of Use of the Site, which are accepted by the User during the registration stage and/or during the use of the Services, and comply with specific requests of the User. Users’ data collected by the Owner for the above listed purposes include: first name, last name, tax code, age, home address, gender, email address, as well as any personal information the User may have voluntarily published. Unless the User gives the Owner a specific and optional consent to process the User’s data for further purposes, the User’s personal data will be used by the Owner for the sole purpose of verifying the identity of the User (also by validating the email address), thus avoiding possible scams or abuses, and contacting the User for service purposes only (e.g. sending notifications about the Services). Without prejudice to what stated elsewhere in this privacy policy, in no case will the Owner make the personal data of the Users accessible to other Users and/or third parties.
(b) administrative-accounting purposes, i.e. to carry out organizational, administrative, financial and accounting activities, such as internal organizational activities and activities that are functional to the fulfillment of contractual and pre-contractual obligations;
(c) legal obligations, that is to fulfill obligations required by the law, by an authority, by a regulation or by European legislation. The provision of personal data for the above processing purposes is optional but necessary, since the failure to provide them will result in the inability for the User to browse the site, sign up to the Site and take advantage of the Services. The personal data which are necessary for the pursuit of the processing purposes described in this paragraph 1 are indicated with an asterisk in the registration form on the Site.
2. Additional processing purposes: marketing (sending advertising material, direct sales and commercial communication)
With the free and optional consent of the User, some of the User’s personal data (i.e., first name, last name, email address, home address) may also be processed by the Owner for marketing purposes (sending advertising material, direct sales and commercial communication), or to enable the Owner to contact the User by mail, email, telephone (landline and/or mobile) and/or SMS and/or MMS to propose to the User the purchase of products and/or services offered by the Owner and/or third-party companies, submit offers, promotions and business opportunities.
Failure to provide consent will not in any way affect the possibility of registering to the Site. If consent is provided, the User may at any time revoke it, making a request to the Owner in the manner indicated in the next paragraph 7.
The User can also easily object to receiving further promotional communications by clicking on the appropriate link for the withdrawal of consent, which is included in each advertising email. After the consent is revoked, the Owner will send an email to the User to confirm that consent has been revoked. If the User wishes to withdraw the consent to receiving promotional communications by telephone, but continue to receive them by email, or vice versa, the User should send a request to the Owner in the manner indicated in the next paragraph 7. The Owner informs that, as a result of exercising the right of opposition to receiving promotional communications by email, it is possible that, for technical and operational reasons, the User will continue to receive some additional communication. If the User continues to receive promotional communications after 24 hours since the exercise of the right of opposition, the issue should be reported to the Owner, using the contacts indicated in the next paragraph 7.
3. Additional processing purposes: newsletter
With the free and optional consent of the User, some personal data of the User (i.e. first name, last name, address, email address) may also be processed by the Owner for the purpose of sending the newsletter. Therefore, the User will receive from the Owner a periodic newsletter with information on activities and promotions within the Site and/or other Owner’s initiatives. Failure to provide consent will not in any way affect the possibility of registering to the Site. If consent is provided, the User may at any time revoke it by making a request to the Owner in the manner indicated in the next paragraph 7. The User can also easily object to further receiving promotional communications by clicking on the appropriate link for the withdrawal of consent, which is included in each email containing the newsletter. After the consent is revoked, the Owner will send an email to the User to confirm that consent has been revoked.
4. Additional processing purposes: profiling
With the free and optional consent of the User, the User’s personal data (i.e. personal and contact data, as well as information relating to services which the User has expressed interest in) may be processed by the Owner also for profiling purposes, i.e. to reconstruct the User’s preferences and consumer habits by identifying the consumer’s profile in order to send the User promotional offers which are consistent with the profile that has been identified. Failure to provide consent will not in any way affect the possibility of registering to the Site. If consent is provided, the User may at any time revoke it by making a request to the Owner in the manner indicated in the next paragraph 7.
5. Processing methods and data storage times
The Owner will process the User’s personal data through manual and IT tools, in ways that will be strictly related to the purposes illustrated in paragraph 1 above and, in any case, guaranteeing the security and confidentiality of the data. Users’ personal data will be kept for the time that is strictly necessary to carry out the primary purposes illustrated in paragraph 1 above, or in any case as long as necessary to protect the interests of both Users and the Owner in civil law. In the cases referred to in paragraphs 2, 3 and 4 above, Users’ personal data shall be kept for the time strictly necessary to fulfill the purposes illustrated in the same and, in any case, for no longer than twenty-four (24) and twelve (12) months respectively.
6. Scope for data communication and dissemination
The Owner’s employees and/or associates who are responsible for managing the Site and all services related to the provision of the Services may become aware of the personal data of the Users. These individuals, who have been instructed in this way by the Owner under Article 29 of the Regulation, will treat the Users’ data solely for the purposes set out in this Privacy Policy and in accordance with the applicable rules.
7. Social buttons and widgets
There are social buttons/widgets on the Site. These are icons of social networking sites, such as Facebook and Instagram, which allow Users to reach – by clicking on the icon – the website in question. By using these icons the User can, for example, share contents or recommend products from the Site. Some contents shared on the social networks may also be shared on the website’s dedicated page. After a click on social buttons/widgets, the social network may collect data related to the User’s visit to the Site. As mentioned in the introduction, this privacy policy does not affect the treatment of the User’s data by a social network. The User must refer exclusively to the privacy policy provided by the social network. Outside the cases in which the User spontaneously shares data with a social network by clicking on social buttons/widgets, the Owner does not disseminate or share any personal data of the User with the social network.
8. Rights of Interested Parties
Users will be able to exercise the rights guaranteed to them by the Applicable Regulations, by contacting the Owner in the following ways:
– By sending a registered letter to the owners’ legal office
JACK&GALU S.r.l. via Magenta n. 49 10128 Torino
– By sending an email message to the following address:
mxgpstore@mxgp.com
1. Users have the right to obtain:
(a) access, update, adjustment and, when they have an interest in it, integration of data;
(b) deletion, anonymization or block of data that have been processed in violation of the law, including those data whose retention is not necessary in relation to the purposes for which the data was collected or subsequently processed;
(c) the evidence that the transactions referred to in letters a) and b), including their content, have been brought to the attention of those to whom the data have been disclosed or disseminated, except where complying with this obligation proves impossible or involves the use of means manifestly disproportionate to the right that is being protected.
2. In addition, Users have:
(a) the right to withdraw consent at any time, if the treatment is based on their consent;
b) (where applicable) the right to data portability (right to receive all personal data in a structured, commonly used format, that is readable by an automatic device), the right to restrict the processing of personal data and the right to delete (“right to be forgotten”);
c) the right to object:
(i) in all or in part, for legitimate reasons, to the processing of personal data, even if relevant to the purpose of their collection;
(ii) in all or in part, to the processing of personal data for the purpose of sending advertising material or direct sales or for carrying out marketing or commercial research;
(iii) to the processing of their data for direct marketing purposes, including profiling, to the extent that it is related to direct marketing.
(d) the right to complain to a supervisory authority (in the Member State where they usually live, where they work or in the one where the alleged infringement occurred), if they feel that their treatment violates the Rules. The Italian Control Authority is the Guarantor for the Protection of Personal Data, based in Piazza Venezia No. 11, 00187 – Rome (http://www.garanteprivacy.it/).
The Owner is not responsible for updating all the links that can be viewed in this Notice, so whenever a link is not working and/or up-to-date, the Users acknowledge and accept that they need to refer to the document and/or section of the website referenced to by that link.